IBM WebSphere Portal 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 uses weak permissions for content items, which allows remote authenticated users to make modifications via the authoring UI.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Websphere_portal | Ibm | 7.0.0.0 (including) | 7.0.0.0 (including) |
| Websphere_portal | Ibm | 7.0.0.1 (including) | 7.0.0.1 (including) |
| Websphere_portal | Ibm | 7.0.0.2 (including) | 7.0.0.2 (including) |
| Websphere_portal | Ibm | 8.0.0.0 (including) | 8.0.0.0 (including) |
| Websphere_portal | Ibm | 8.0.0.1 (including) | 8.0.0.1 (including) |
| Websphere_portal | Ibm | 8.5.0.0 (including) | 8.5.0.0 (including) |